CVE-2020-36407

2021-07-0103:15:08

Google

osv.dev

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

JSON

libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.

CPENameOperatorVersion
libavifeq0.1.2
libavifeq0.3.10
libavifeq0.5.5
libavifeq0.3.1
libavifeq0.4.0
libavifeq0.2.0
libavifeq0.8.1
libavifeq0.4.5
libavifeq0.7.1
libavifeq0.5.0

Name	Operator	Version
libavif	eq	0.1.2
libavif	eq	0.3.10
libavif	eq	0.5.5
libavif	eq	0.3.1
libavif	eq	0.4.0
libavif	eq	0.2.0
libavif	eq	0.8.1
libavif	eq	0.4.5
libavif	eq	0.7.1
libavif	eq	0.5.0

Rows per page:

1-10 of 461

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=24811

github.com/AOMediaCodec/libavif/commit/0a8e7244d494ae98e9756355dfbfb6697ded2ff9

github.com/google/oss-fuzz-vulns/blob/main/vulns/libavif/OSV-2020-1597.yaml